$ rpki-client -vvf rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft File: k-ucLPZOblbp6NVWzMompR6L26A.mft (raw, json) Hash identifier: e1d4zVnxRCzkK5GxcpiZO7RhQ5aTo/l+rOw1iatfLvA= Subject key identifier: 99:04:94:22:C1:FB:D1:11:93:EA:35:22:F1:FF:1C:9B:AF:F2:95:FE Authority key identifier: 93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0 Certificate issuer: /CN=A911FBDF/serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft Manifest number: 2F Signing time: Sat 23 Aug 2025 07:57:27 +0000 Manifest this update: Sat 23 Aug 2025 07:57:26 +0000 Manifest next update: Sat 30 Aug 2025 07:57:26 +0000 Files and hashes: 1: k-ucLPZOblbp6NVWzMompR6L26A.crl (hash: 35kB6+RCF4n9E5YMHpWzFDHyUslX6i2x2dQ5Y8fwJZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FBDF, serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0 Validity Not Before: Aug 23 07:57:26 2025 GMT Not After : Aug 30 07:57:26 2025 GMT Subject: CN=68a97467-b608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:44:1c:0b:6a:90:75:0f:c0:05:fc:ea:de:dc: fa:65:84:2e:7e:f2:9a:6f:d5:19:83:fb:60:63:56: dc:ea:a8:2a:4b:97:57:d4:9a:32:c8:01:81:50:f6: 14:7d:fe:bd:0b:f4:fa:e4:01:ab:cf:e5:36:d9:b6: e6:ed:0a:5c:3b:4d:b8:46:25:5b:57:51:d9:2f:5d: f9:81:98:5d:a7:f2:0c:5b:a6:79:ac:0b:1a:ea:47: 9a:aa:51:bf:65:03:c4:3b:39:32:2f:70:8e:ab:a4: 83:13:eb:68:00:d0:8e:2e:0a:02:b1:11:e8:96:89: 9b:72:a7:aa:6a:54:33:7f:e2:80:24:e2:7d:4f:26: af:ce:f8:fb:5f:e4:28:11:88:54:45:0e:5e:93:c6: 3f:9f:ac:2c:fe:2a:4a:4c:9d:21:d7:aa:4f:0f:41: a7:6d:0a:a8:67:fa:8f:92:0b:47:19:78:8d:49:10: 04:3e:e2:78:84:f7:ba:d2:df:5c:c6:e3:dc:1f:5e: 16:de:78:99:e9:a6:4f:20:e6:e5:2c:46:b3:d9:fa: d9:fa:3c:f6:ea:32:52:9a:3a:fa:52:d7:1f:20:3d: 88:97:bc:fd:26:41:d6:56:60:2a:2d:ee:a7:10:0c: 7b:b9:75:80:bf:4f:e8:4d:ee:49:0a:24:83:52:c7: 0e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:04:94:22:C1:FB:D1:11:93:EA:35:22:F1:FF:1C:9B:AF:F2:95:FE X509v3 Authority Key Identifier: keyid:93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fc:b6:e4:67:80:6f:c8:8b:5e:59:12:24:ef:cd:c8:6d:0a: 11:b7:c8:f5:f0:e2:7b:4e:12:bc:0e:96:56:1f:0a:c9:8c:55: bb:1f:55:3c:b3:e3:d0:09:7e:55:85:f3:95:8a:5d:5b:4b:01: 88:a3:a0:ba:1e:6e:dc:59:11:d5:9c:52:be:5c:73:91:bb:f8: 46:12:c0:92:f5:ad:f1:e1:7e:70:ec:58:1b:81:e9:0c:53:03: a6:f1:24:4c:56:a2:e8:7e:12:44:02:6f:44:7b:3f:db:b2:2e: c1:54:e6:6b:ea:d4:98:5d:90:94:07:14:53:c5:12:c7:66:1f: 10:aa:c4:ce:8e:00:9b:6c:0c:66:b4:af:02:7f:df:4d:ab:c9: c2:22:d1:fd:15:21:4a:ee:27:29:bd:96:88:ae:2c:66:d2:f8: 97:cf:19:ca:5f:48:80:d1:1f:5d:54:2c:12:8d:69:ae:aa:4e: ed:2a:3a:98:a2:bd:c2:7c:36:10:fc:bb:c6:a7:46:f7:c1:17: d9:d8:82:8f:15:4c:78:45:48:de:15:98:56:6a:77:b3:d8:38: fe:db:4a:56:0f:7b:a0:ff:11:6f:d8:f8:d1:a1:7c:3f:2e:3b: 56:30:23:03:1f:2f:a2:7f:48:e4:4c:20:79:15:68:19:5f:42: 75:f4:d0:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RkJERjExMC8GA1UEBRMoOTNFQjlDMkNGNjRFNkU1NkU5RThENTU2Q0NDQTI2QTUx RThCREJBMDAeFw0yNTA4MjMwNzU3MjZaFw0yNTA4MzAwNzU3MjZaMBgxFjAUBgNV BAMTDTY4YTk3NDY3LWI2MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvRBwLapB1D8AF/Ore3PplhC5+8ppv1RmD+2BjVtzqqCpLl1fUmjLIAYFQ9hR9 /r0L9PrkAavP5TbZtubtClw7TbhGJVtXUdkvXfmBmF2n8gxbpnmsCxrqR5qqUb9l A8Q7OTIvcI6rpIMT62gA0I4uCgKxEeiWiZtyp6pqVDN/4oAk4n1PJq/O+Ptf5CgR iFRFDl6Txj+frCz+KkpMnSHXqk8PQadtCqhn+o+SC0cZeI1JEAQ+4niE97rS31zG 49wfXhbeeJnppk8g5uUsRrPZ+tn6PPbqMlKaOvpS1x8gPYiXvP0mQdZWYCot7qcQ DHu5dYC/T+hN7kkKJINSxw4hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmQSUIsH7 0RGT6jUi8f8cm6/ylf4wHwYDVR0jBBgwFoAUk+ucLPZOblbp6NVWzMompR6L26Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGQkRGL0JDMTc1RjM4M0Qz MzExRjA5MjFGREIxQ0M0RjlBRTAyL2stdWNMUFpPYmxicDZOVld6TW9tcFI2TDI2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvay11Y0xQWk9ibGJwNk5WV3pNb21wUjZMMjZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG QkRGL0JDMTc1RjM4M0QzMzExRjA5MjFGREIxQ0M0RjlBRTAyL2stdWNMUFpPYmxi cDZOVld6TW9tcFI2TDI2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJf8tuRngG/Ii15ZEiTvzchtChG3yPXw4ntOErwOllYfCsmMVbsfVTyz 49AJflWF85WKXVtLAYijoLoebtxZEdWcUr5cc5G7+EYSwJL1rfHhfnDsWBuB6QxT A6bxJExWouh+EkQCb0R7P9uyLsFU5mvq1JhdkJQHFFPFEsdmHxCqxM6OAJtsDGa0 rwJ/302rycIi0f0VIUruJym9loiuLGbS+JfPGcpfSIDRH11ULBKNaa6qTu0qOpii vcJ8NhD8u8anRvfBF9nYgo8VTHhFSN4VmFZqd7PYOP7bSlYPe6D/EW/Y+NGhfD8u O1YwIwMfL6J/SORMIHkVaBlfQnX00IE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:20 2025 by rpki-client